Cloud Storage Tester
Summary: A Burp Suite extension called Cloud Storage Tester, authored by Elliott Frantz at version 1.0a and last updated 25 February 2022, identifies and tests S3 buckets, Google Storage buckets, and Azure Storage containers for common misconfiguration issues. Users can supply AWS or GS keys from their management console for thorough tests, and the extension still provides minimal functionality such as identifying buckets without them.
Bottom line: The tool exists because cloud storage buckets and containers are routinely left misconfigured, and it can still enumerate them even when no credentials are supplied - meaning an attacker probing your environment faces the same low bar. PortSwigger notes the extension is written by a third party and makes no warranty about its quality or usefulness.
Read the original at PortSwigger Research ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026